Skip to content

Releases: crowdsecurity/php-cs-bouncer

4.1.0

10 Jan 04:09
ae0e1c1
Compare
Choose a tag to compare

Compare with previous release

Changed

  • Do not save origins count when the bouncer does not bounce the IP, due to business logic. This avoids sending a
    "processed" usage metrics to the LAPI when the IP is not bounced at all.

4.0.0

09 Jan 04:18
778fc96
Compare
Choose a tag to compare

Compare with previous release

Added

  • Add pushUsageMetrics method to AbstractBouncer class
  • Save origins count item in cache after a remediation has been applied

Changed

  • Breaking change: AbstractBouncer::getRemediationForIp method returns now an array with remediation and
    origin keys.
  • Breaking change: $remediationEngine params of AbstractBouncer constructor is now a LapiRemediationEngine instance
  • Breaking change: AbstractBouncer::getAppSecRemediationForIp don't need $remediationEngine param anymore
  • Breaking change: AbstractBouncer::handleRemediation requires a new origin param
  • Update crowdsec/remediation-engine dependency to v4.0.0

Removed

  • Breaking change: Remove bouncing_level constants and configuration as it is now in crowdsec/remediation-engine package

3.2.0

23 Oct 05:39
68e0c83
Compare
Choose a tag to compare

Compare with previous release

Added

  • Add protected buildRequestRawBody helper method to AbstractBouncer class

3.1.0

18 Oct 07:52
0b4c021
Compare
Choose a tag to compare

Compare with previous release

Changed

  • Update crowdsec/remediation-engine dependency to v3.5.0 (appsec_max_body_size_kb and
    appsec_body_size_exceeded_action settings)

3.0.0

04 Oct 05:10
caa5509
Compare
Choose a tag to compare

Compare with previous release

Added

  • Add AppSec support
  • Add use_appsec configuration

Changed

  • Breaking change: Add abstract methods that must be implemented to use AppSec:
    • getRequestHost
    • getRequestHeaders
    • getRequestRawBody
    • getRequestUserAgent
  • bounceCurrentIp method asks for AppSec remediation if use_appsec is true and IP remediation is bypass
  • Update crowdsec/common dependency to v2.3.0
  • Update crowdsec/remediation-engine dependency to v3.4.0

Removed

  • Breaking change: Remove DEFAULT_LAPI_URL constant as it already exists in crowdsec/lapi-client package

2.2.0

20 Jun 07:34
0cbb23b
Compare
Choose a tag to compare

Compare with previous release

Changed

  • Change the visibility of AbstractBouncer::getBanHtml and AbstractBouncer::getCaptchaHtml to protected to enable custom html rendering implementation

2.1.0

14 Dec 01:43
Compare
Choose a tag to compare

Compare with previous release

Changed

  • Update gregwar/captcha from 1.2.0 to 1.2.1 and remove override fixes
  • Update crowdsec/common dependency to v2.2.0 (api_connect_timeout setting)
  • Update crowdsec/remediation-engine dependency to v3.3.0 (api_connect_timeout setting)

2.0.0

13 Apr 07:17
4faf574
Compare
Choose a tag to compare

Compare with previous release

Changed

  • Update gregwar/captcha from 1.1.9 to 1.2.0 and remove some override fixes

Removed

  • Remove all code about standalone bouncer

1.4.0

30 Mar 01:13
c0f5c1f
Compare
Choose a tag to compare

Compare with previous release

Changed

  • Do not rotate log files of standalone bouncer

1.3.0

24 Mar 08:36
Compare
Choose a tag to compare

Compare with previous release

Changed

  • Use crowdsec/remediation-engine ^3.1.1 instead of ^3.0.0
  • Use Redis and PhpFiles cache without cache tags